A Fake usb flash drive, is a memory pen stick that has been digitally altered – reprogrammed to lie to an operating system about the real size of it’s flash nand storage chip. Once you exceed true capacity of the chip, you begin to loose files. People do not suspect the real reason, thinking it an error in the data transfer. Only when it happens again and again do they suspect there is something more… How can you find out if you have a fake usb flash drive?
Republished from InspectorTech’s http://fixfakeflash.wordpress.com/ site.
In this guide you are taken through steps that can help you prove whether you have a fake. Evidence, testing results and photographs. A true case on a infamous fake flash seller is used. No, this eBay seller was not located in the Orient but in the United Kingdom!
The quick way to determine the real capacity of any flash chip used in usb flash drives, memory cards or MP Players is to use a free program called H2testw. The old fashioned way, is to take the item apart. Then decode the usb controller chip and the storage chip.
Usb controllers have a maximum range of flash chip sizes they can handle. Older controllers are especially vulnerable with flaws that can be exploited. These are easily be reprogrammed and manipulated using the right software tools to allow for the flash drive chip to be seen larger in capacity than it really is.
Nand flash storage chips can usually be decoded using their full serial information and searched on the internet. Brand name manufacturers have lists you can use to confirm the size of the chip by it’s serial information. If it is a very low quality or factory reject, you will will not find any brand name information (see Genuine Verses Fake Counterfeit USB Flash Drives – A Guide – USB Flash Chips Used In USB Flash Drives – Grades A B C D ). This discovery can be extremely useful to you, especially if the seller said it was a brand name such as SAMSUNG and it is not – more evidence.
FixFakeFlash has a category: Flash Chip Storage with articles for manufacturers of nand flash chips and includes the links to check the serial information.
When you have to confront a fake flash seller who does not accept the proven H2testw, you can prove it a additional information. The physical facts photographed. Opening suspected flash drives that fail H2testw, can help you corner fake flash sellers, even eBay, PayPal or any other internet site that offered them. Fake Flash sellers can not get past you with the “defective song”, when the actual flash drive chip shouts the truth about it’s real manufactured capacity! Here is a visual example based on a real case.
16GB USB Flash Drives Fakes Exposed
A UK eBay Seller, bigdawgbaker recently sold 16GB usb flash drives that turned out to be a fake, false capacity. He stubbornly insisted there was nothing wrong with his usb flash drives and refused the results of H2testw. SOSFakeFlash investigated him. bigdawgbaker is a reseller of fakes, worse then a fake flash seller. Additional background information is presented, because he sold what he bought from known fake flash sellers.
Victims are much sharper than most fraudsters think. This guide will to help you to become even sharper and arm you to deal with your fake flash seller.
bigdawgbaker bought 180359609665 from upcomingtrend (see upcomingtrend Ebay Fake Flash Seller Alert – China ). Note all models have been investigated since that alert by SOSFakeFlash and confirmed fake.
bigdawgbaker resold this usb flash drive to an eBay member. Notice the British Flag? And also the UK seller? Watch out for this. It is an attempt to make you believe that buying from a local eBay seller is safe. You as much at risk from a local seller as you are from one in the orient. After all, where are these items made?
The victim tested with H2testw and got this result from the recycled fake purchased from upcomingtrend and sold by bigdawgbaker:
Warning: Only 16183 of 16184 MByte tested.
The media is likely to be defective.
1.9 GByte OK (4073164 sectors)
13.8 GByte DATA LOST (29069620 sectors)
Details:0 KByte overwritten (0 sectors)
0 KByte slightly changed (< 8 bit/sector, 0 sectors)
13.8 GByte corrupted (29069620 sectors)
0 KByte aliased memory (0 sectors)
First error at offset: 0x000000000a5d9420
Expected: 0x9ec8e6e3d3718420
Found: 0x3d91cdc7a6e32420
H2testw version 1.3
Writing speed: 9.04 MByte/s
Reading speed: 10.3 MByte/s
H2testw v1.4
How did the seller respond in the PayPal case?
Seller: You can report this to sosfakeflash but he does not test any of the products I sell. That test you have done is not an industry standard and means nothing. No refund wil be forthcoming.
You could face this from a fake flash seller. We would say then, what is the industry standard? Is there one? The fact is, H2testw was commissioned by a famous computer magazine site, after they got caught in fake usb flash drives. They had a promotion on and the prize was? USB Pen stick flash drives. So you can imagine how they felt! The software is copyrighted, but is given free to everyone to use for testing. They recognized the problem and c’t Magazin für Computertechnik is providing an important service to people around the world in offering it. It is currently at version 1.4 created by Herald Bögeholz. Victims of fake flash devices are very fortunately that the site and author of the software offer it. Their contribution against this devious fraud is highly respected by the FrankenFlash project. In 19 months of operation the project can only say one thing, time and time again when flash drives are opened, they only confirm what H2testw reported!
bigdawgbaker also bought 320380627749, 320380627509 from ebay fake flash seller digitalting0303, now suspended by ebay, See (digitalting0303 Ebay Fake Flash Seller High Alert Devious – Hong Kong ) for the original line up of items sold by digitalting0303.
When the first victim continued to challenge in the PayPal case, bigdawgbaker replied:
Seller: These are tested by me and show the correct storage.
Okay, exactly how? In any case another Another victim fell into his trap buying:
The testing results from H2testw:
The media is likely to be defective.
1.8 GByte OK (3972781 sectors)
13.7 GByte DATA LOST (28760403 sectors)
Details:3.1 GByte overwritten (6625269 sectors)
1.5 KByte slightly changed (< 8 bit/sector, 3 sectors)
10.5 GByte corrupted (22135131 sectors)
16 KByte aliased memory (32 sectors)
First error at offset: 0x0000000032c64200
Expected: 0x0000000032c64200
Found: 0×0000000032864200
H2testw version 1.3
Writing speed: 2.58 MByte/s
Reading speed: 4.79 MByte/s
H2testw v1.4
Recall that bigdawgbaker said:
These are tested by me and show the correct storage.
He never said what he tested with and he was very careful in his words. He said “show the correct storage“. The emphasis is on “show”. That is exactly what fake flash devices are supposed to do, show the wrong size. Have you believe in the advertised size.
The usb flash drive in our example is one of the oldest and most classic fakes sold on eBay. This victim took the usb flash drive apart and photographed everything in detail:
His test results in action.
Indeed the operating system shows 16GB. That is what a fake flash usb drive is supposed to do. Lie!
Here is the drive. In fact the victim reported it was the same shipping envelope used by the original fake flash seller digitalting0303. bigdawgbaker was not very bright and extremely cheap. More evidence.
The first step in opening this classic counterfeit.
The usb flash drive disassembled. Note the pieces. You should always line up the parts in the order you take the drive apart to make it easier to put it back together again. The Pcb board in incased in the plastic shell at the right.
Notice the 16GB sticker on the outer leatherette case. These stickers are the most damning. You can put any sticker you like. Real usb flash drives don’t use such a cheap method to indicate size. This is the most important warning bell for anyone who buys a usb flash drive. If you bought one that has a sticker like this, test immediately! It does not matter what the memory pen stick looks like, TEST!
This is the side with the storage chip. In some cases you will have a hand written size in the sticker. One of the oldest members in the FrankenFlash project has a jar full of fakes that had 2GB written on the stickers! You will notice that the victim chose not to remove the sticker to continue decoding the storage chip. The reason is evidence, or “patina” – potential prosecution in a court of law. The markings for the serial are very faint. Not a good sign. The chip is old and potentially substandard quality. Note that is was supposed to be a 16GB usb flash drive. There is only one chip. A one chip usb flash drive at 16GB is very recent technology and expensive! This usb flash drive sold for about £19.55, originally purchased from ebay fake flash seller digitalting0303 at £11.98. bigdawgbaker had almost a 100% markup!
The other side of the board, shows the usb controller.
a closer look at the usb controller chip.
MW6208E 1PL 370761-4 09HT0325
MW6208E controller chip! This is one of the most manipulated sub controller chips! InspectorTech finds that this is one of the most popular search that brings people to the fixfakeflash site searching for help on how to repair fakes that have this controller! It is a fake flash reprogrammers favorite! If you find with Chipgenius that you have a usb flash drive with MW6208 or any variations – Start worrying! TEST! You have a very high probability that you bought a fake usb flash drive!
LibreOffice
Firefox
No comments:
Post a Comment